Re: Nginx Directory Listing - Restrict by IP Address

[Friscia, Michael]

I think you need to change this a little

map $remote_addr $allowed {
    default         “off”;
    1.1.1.1         “on”;
    2.2.2.2         “on:;
}
and then in in the download location block

 autoindex $allowed;
I use similar logic on different variables and try at all costs to avoid IF 
statements anywhere in the configs.

___________________________________________
Michael Friscia
Office of Communications
Yale School of Medicine
(203) 737-7932 - office
(203) 931-5381 - mobile
http://web.yale.edu<http://web.yale.edu/>

From: nginx <nginx-boun...@nginx.org> on behalf of PRAJITH 
<prajithpalakk...@gmail.com>
Reply-To: "nginx@nginx.org" <nginx@nginx.org>
Date: Friday, May 18, 2018 at 2:16 AM
To: "nginx@nginx.org" <nginx@nginx.org>
Subject: Re: Nginx Directory Listing - Restrict by IP Address

Hi Satish,
There are "if" constructs in nginx, please check 
http://nginx.org/r/if<https://urldefense.proofpoint.com/v2/url?u=http-3A__nginx.org_r_if&d=DwMFaQ&c=cjytLXgP8ixuoHflwc-poQ&r=wvXEDjvtDPcv7AlldT5UvDx32KXBEM6um_lS023SJrs&m=fKmL-eoW-L4wbuOH4Cy1Z_3ZWkTmrmgNPGNe6O6FIV4&s=_hMwYrlV1QXfU7fEvfqx9BnEUgUoadjGtTqav5fo_7M&e=>.
 if you want to allow multiple IP addresses, it might be better idea to use 
map. eg:

map $remote_addr $allowed {
    default         0;
    1.1.1.1         1;
    2.2.2.2         1;
}
and then in in the download location block

 if ($allowed = 1) {
        autoindex on;
}
Thanks,
Prajith

On 18 May 2018 at 05:35, Sathish Kumar 
<satcs...@gmail.com<mailto:satcs...@gmail.com>> wrote:

Hi Team,

We have a requirement to allow directory listing from few servers and disallow 
from other ip addresses and all IP addresses should be able to download all 
files inside the directory.

Can somebody provide the correct nginx config for the same.

location / {

root /downloads;

autoindex on;

allow 1.1.1.1;

deny all;

}

If I use the above config, only on 1.1.1.1 IP address can directory list from 
this server and can file download but from other IP addresses download shows 
forbidden, due to IP address restriction

Is there a way to overcome this issue, thanks.

Thanks & Regards
Sathish.V

_______________________________________________
nginx mailing list
nginx@nginx.org<mailto:nginx@nginx.org>
http://mailman.nginx.org/mailman/listinfo/nginx<https://urldefense.proofpoint.com/v2/url?u=http-3A__mailman.nginx.org_mailman_listinfo_nginx&d=DwMFaQ&c=cjytLXgP8ixuoHflwc-poQ&r=wvXEDjvtDPcv7AlldT5UvDx32KXBEM6um_lS023SJrs&m=fKmL-eoW-L4wbuOH4Cy1Z_3ZWkTmrmgNPGNe6O6FIV4&s=UVcx123SYSrcJEG8dvDlswatIFjwcvFXOBJR6JO6VVk&e=>


_______________________________________________
nginx mailing list
nginx@nginx.org
http://mailman.nginx.org/mailman/listinfo/nginx